Creating a Connected App

As part of the pre-provisioning process, you must configure a Connected App in your org to provide authentication and authorization for the following TurboEngines services:

• TurboConfig 
• TurboPricing

The example in the following tasks is provided for TurboConfig but is the same process for any service configuration.

To create a Connected App

1. Navigate to Setup > App Setup > Create > Apps.
2. Scroll down and search for the Connected Apps related list and click New to create a new app.

3. Fill in the following details in the Basic Information section.

   Field	Description
   Connected App Name	Enter the name of the Connect App.
   API Name	The API name is generated automatically based on the name of the Connected App.
   Contact Email	Enter the email address of the administrator managing the Connected App.

4. Fill in the following details in the API (Enable OAuth Settings) section.

   Fields	Description
   Enable OAuth Settings	Select this to define the OAuth settings. For example, TurboConfig. When you enable this field, additional settings are displayed under API (Enable OAuth Settings) section.
   Enable for Device Flow	Select this to enable the connected app for an external application.
   Callback URL	The Callback URL is generated by default when you select the field Enable for Device Flow. For example, https://test.salesforce.com/services/oauth2/success is generated based on the instance URL. You can also add other URLs in separate lines.
   Selected OAuth Scope	Select all the entries under Available OAuth Scopes and move them to Selected OAuth Scopes by clicking the Add arrow.
   Require Secret for Web Server Flow	Select this to require the connected app to provide a consumer secret for authorization.

5. You must leave all other fields blank. Click Save.

To capture Consumer Key

After you create a Connected App, CPQ generates Consumer Key and Consumer Secret. You must provide the value of Consumer Key to Conga Technical Support.

1. Navigate to Setup > App Setup > Create > Apps.
2. Scroll down and search for the Connected Apps related list.
3. Click the name of the Connected App you created in the previous topic.
4. Click Copy next to Consumer Key.
5. Store the information for the next part of the process.

Enabling the Connected App for JWT Authorization

Enabling the Connected App for JWT Authorization is mandatory for all the new consumers. For this, you require a Public Key (certificate) which you can collect from Conga TS or Conga Ops.

1. Setting up the Permitted Users.
   1. Navigate to Setup > Apps > App Manager.
   2. Click the icon of required Connected App> Manage.
   3. Click Edit Policies. The Connected App edit page is displayed.
   4. In the OAuth Policies section, select Admin approved users are pre-authorized from the Permitted Users option.
      
   5. Click Save.
2. Uploading the Public Key (certificate) to Connected App.
   1. Navigate to Setup > Apps > App Manager.
   2. Click the  icon of required Connected App> Edit.
   3. Enable Use Digital Signatures.
   4. Click Choose File and upload the public key (certificate) provided by the Conga TS or Cloud Ops.
      
   5. Click Save.
3. Associating correct access for the Connected App.
   1. Navigate to Setup > Apps > App Manager.
   2. Click the  icon of required Connected App> Manage.
   3. If you are using Profiles or Permission Sets for OAuth applications, Perform the following based on your organization policy. 
      1. To associate with the profile, click Manage Profiles > click the checkbox next to the required profile or
      2. To associate with the permission sets, click Manage Permission Sets > click the checkbox next to the required permission set.
      3. Click Save.
4. Once the tenant onboarding is completed, you must verify a Connected App's JWT flow settings and access levels and ensure that the JWT related feature flag (is-certbased-jwt-auth-enabled) is enabled for your organization.